Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          oiJbzKSWB4h2ElYVIBNIJgmc4y1ZgqpJd7eW26RFLPQ=
Subject key identifier:   49:F8:EE:11:BA:4E:76:77:B5:17:A0:5E:59:52:40:93:E5:95:4F:97
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       019E30E0CA26A0B6D77B9855E40ED68ABA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          11D0
Signing time:             Sat 16 May 2026 13:01:38 +0000
Manifest this update:     Sat 16 May 2026 13:01:38 +0000
Manifest next update:     Sun 17 May 2026 13:01:38 +0000
Files and hashes:         1: IM14LBYF8xBAMrWihjQwJhZWTFs.roa (hash: L/LoNTKL0OkWZiTSY3TN85uewDjoeQN9VcIBqy5aAq8=)
                          2: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: aJji+xryy9r/q+ZRDQE0gRm/Ze+GDgzqXjykfCukiPk=)
                          3: meqA3EJ2dk40MOFtOn3KY_3JqZc.roa (hash: PMvWvyZeQ/F56OIn+Hm8HW0sQqsC8sTM1/3A775LAFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:ca:26:a0:b6:d7:7b:98:55:e4:0e:d6:8a:ba:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: May 16 13:01:38 2026 GMT
            Not After : May 17 13:01:38 2026 GMT
        Subject: CN=49f8ee11ba4e7677b517a05e59524093e5954f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c0:ed:5d:e5:2a:27:2c:bc:47:bb:9a:4d:c7:
                    58:e4:d9:97:0f:2d:9c:23:10:42:93:2b:9e:49:b3:
                    71:ba:ad:39:87:ff:15:ad:08:57:94:80:5b:4e:6a:
                    69:64:d7:b5:d6:e4:e3:73:b1:ee:8a:2a:a4:d5:49:
                    1d:14:8e:0a:48:63:59:53:dc:93:d4:43:10:50:1b:
                    ea:63:f7:c8:38:95:d3:b4:92:22:71:ba:a6:ff:77:
                    97:e1:68:16:f6:64:f5:fe:72:fe:ce:86:e1:3b:c6:
                    fe:7d:a6:cb:af:ae:54:99:0e:9b:e4:d0:95:5f:74:
                    fa:19:3d:c3:05:fb:ea:dc:31:e4:4e:9b:8c:5e:34:
                    57:91:0a:ea:6c:20:a2:68:8a:12:14:e1:6e:a4:29:
                    d3:f3:94:61:2a:5d:96:5b:54:fb:fe:e6:71:f7:ef:
                    23:66:4b:f5:ae:a0:65:62:ac:59:42:ac:47:ca:bc:
                    7f:68:28:c2:0c:fc:a8:13:f9:57:97:52:08:04:cc:
                    fe:3b:0c:83:b2:ec:a2:39:c9:44:11:48:56:bb:0e:
                    3d:e3:58:f3:e5:70:c6:d4:e3:fb:e7:60:44:3c:f6:
                    cd:b4:ce:2c:cb:a7:a0:b0:a0:e6:44:72:20:f0:6b:
                    a3:5b:bc:f3:a3:a6:50:22:2c:46:f5:7a:09:cd:34:
                    2d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:EE:11:BA:4E:76:77:B5:17:A0:5E:59:52:40:93:E5:95:4F:97
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:43:5a:33:a6:8c:70:a6:49:b3:fb:2c:ec:6e:4a:d8:36:67:
         b9:38:96:16:df:3b:64:ad:95:62:d5:43:41:b9:bd:eb:ea:5a:
         52:1e:ca:a7:e7:0c:fe:b4:3f:23:d7:1e:29:aa:e5:91:ce:3a:
         15:08:c4:36:bf:32:6a:8c:2e:40:0b:4c:86:0d:9b:b9:63:4c:
         a3:1a:15:2b:e7:9f:4e:2b:d3:8f:4f:1e:20:82:ba:8b:ff:2b:
         78:a9:89:c3:b9:c1:7d:4a:21:75:99:50:9b:68:21:84:1e:0b:
         0b:46:d0:d7:f2:72:cc:ba:fb:ee:fc:86:7a:d2:31:51:00:9b:
         fb:3c:d1:fd:c0:83:db:60:d8:67:5c:22:55:fc:9c:00:36:e2:
         66:74:eb:fe:b2:58:c2:33:cf:55:17:0b:33:a8:1e:e0:38:b2:
         41:4e:18:e9:c2:0a:05:69:78:48:bc:34:73:14:81:6e:8f:22:
         87:a2:2f:a3:35:c7:4a:69:a6:bd:6d:33:8b:6c:d8:93:c9:2e:
         d4:cb:92:02:b3:db:99:49:3a:82:dd:c6:3f:30:6b:38:a5:73:
         f2:b5:df:e0:f2:42:df:d7:5d:c5:aa:6c:e5:37:61:4f:99:91:
         a5:78:31:d2:77:6b:87:3f:1f:d3:4d:4a:70:8a:a7:57:b6:4a:
         c3:b4:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:35 2026 by rpki-client